Shared responsibility model, common criteria and a harmonised approach to the security of information types through Cybersecurity Framework Profiles Ted Dziekanowski based upon data risk. #theaugustagroup View Original Post
My understanding is that DoDi 8510.01 and DoDi 5000.90 enable the DoD to implement FISMA, the RMF and for a Purchase Officer(PO) to assess risk before an ATO is issued. () That would imply that a PO has the scope…
Thanks for posting Ted Dziekanowski It seems that some U.S and EU regulators are taking a leaf out of the SEC book. Setting regulatory regimes that place the responsibility on boards to implement, assure and attest cybersecurity risk management compliance.…
‘Cybersecurity key to participating in global markets’ Investment in Africa will be correlated to the ability to manage cybersecurity risks. 29 our of 54 countries have implemented cybersecurity legislation, and with legislation comes the challenges of enforcing compliance. #theaugustgroup #cybersecurity…
A nice summary of SOC. A SOC assessment can be used to place a level of assurance over internal cyber controls ahead of regulatory attestation. As the article points out, they can be delivered through internationally recognised and accredited institutions…
NIST Cybersecurity Framework Profile (CSF) 2.0 gets underway with a well attended workshop this week, hosted by NIST. Providing an opportunity for the NIST community to come together and discuss the development of the CSF over the past 9 years…
Does the UK have a defensive cyber strategy? The U.S Federal Government is starting to come to terms with the need to secure critical national infrastructure and regulating for it. The EU is adopting EU NIS 2.0 and the Australians…
Ted Dziekanowski Setting common criteria for nation states to agree and authorize common regulatory, cyber and risk standards. That everyone can agree upon and operate across national boundaries. Following a method that has already been created and adopted by several…
Data and cybersecurity compliance is a National Security conversation. While the implementation of data security legislation such as GDPR is important for the protection of PII, alignment with international standards and partner nations is an important consideration for National Security.…
An interesting report on the state of the CISO market, primarily in the U.S. Stress and Burnout are still significant issues for CISOs. But changes are starting to take place as CISOs progress towards the board room, as regulation develops…
